CVE-2026-82233

SiYuan before v3.8.1 is affected by a path traversal vulnerability in the asset.upload MCP tool , which accepts arbitrary absolute file paths without workspace boundary validation. An attacker can leverage prompt injection to induce the AI Agent to upload sensitive files—such as SSH keys or crede...